CWE•Base•Draft•6 recent CVEs
CWE-366Race Condition within a Thread
Description
If two threads of execution use a resource simultaneously, there exists the possibility that resources may be used while invalid, in turn making the state of execution undefined.
Common consequences
- Integrity,Other→Alter Execution Logic,Unexpected StateThe main problem is that -- if a lock is overcome -- data could be altered in a bad state.
Potential mitigations
- Architecture and DesignUse locking functionality. This is the recommended solution. Implement some form of locking mechanism around code which alters or reads persistent data in a multithreaded environment.
- Architecture and DesignCreate resource-locking validation checks. If no inherent locking mechanisms exist, use flags and signals to enforce your own blocking scheme when resources are being used by other threads of execution.